Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60E1ED4A622711F09B4BA4A6DAE4EC9C.roa
File: 60E1ED4A622711F09B4BA4A6DAE4EC9C.roa (raw, json)
Hash identifier: 19gyW9Im0SzbK+43sqcJhtQorEs4EwPBM3pMUECR9ag=
Subject key identifier: 0C:7A:0C:EA:C0:00:EF:0D:1B:9F:5C:FB:71:82:B4:7F:92:48:44:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016571
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60E1ED4A622711F09B4BA4A6DAE4EC9C.roa
Signing time: Wed 16 Jul 2025 09:29:32 +0000
ROA not before: Wed 16 Jul 2025 09:29:27 +0000
ROA not after: Fri 22 Aug 2025 09:29:27 +0000
asID: 397071
IP address blocks: 45.195.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91505 (0x16571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 09:29:27 2025 GMT
Not After : Aug 22 09:29:27 2025 GMT
Subject: CN=687770fc-afa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:69:63:74:8d:b9:93:c1:29:bc:82:c5:a5:
4b:f3:14:bb:6f:aa:4d:49:af:77:50:e0:dc:39:38:
25:95:ed:c9:58:12:3a:c5:65:9d:c4:82:a3:7b:2b:
c6:60:05:67:01:41:fd:88:3f:b0:1d:32:a0:9d:32:
68:82:69:49:96:f1:ca:ba:c8:1f:8e:4a:6e:8a:6e:
6e:20:b3:53:a1:2a:d2:ae:d3:9a:f4:47:0d:a1:69:
ed:18:cb:db:1e:20:42:32:57:7d:38:1b:51:40:45:
82:f0:a9:dc:26:91:97:5f:85:a0:8e:29:e1:88:7b:
fb:03:91:44:2d:1a:4b:6f:bd:64:82:ab:73:a2:74:
88:30:b7:6d:2c:14:56:72:7b:7e:7f:22:10:a7:e5:
a2:43:bd:e7:11:59:a3:9f:a6:e1:f8:db:7c:4e:70:
ae:3c:67:8b:47:e6:b4:97:bc:1b:28:5d:6d:be:a7:
11:7b:f0:38:b3:1e:40:46:12:b6:d9:12:b9:c7:42:
18:89:d9:b2:cf:f5:11:05:b4:75:a9:cf:6c:f9:1d:
81:c9:37:3e:0a:4e:87:7f:4e:27:4d:7c:c2:d4:50:
4b:23:66:03:dd:0e:26:cf:f6:ca:de:bf:1a:b1:fc:
96:55:e3:a9:23:d4:8a:e3:da:d1:9a:f1:ff:50:89:
b9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7A:0C:EA:C0:00:EF:0D:1B:9F:5C:FB:71:82:B4:7F:92:48:44:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60E1ED4A622711F09B4BA4A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.134.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:51:fb:bd:0f:b6:64:5e:74:27:6f:d2:8d:04:8d:2a:c4:da:
04:9d:0c:0f:e7:db:3a:de:3d:e4:0c:8a:cd:50:5d:56:35:d9:
75:a3:26:a4:09:7b:a4:66:d3:4a:cb:a5:44:03:f4:9d:35:d0:
47:40:47:14:44:3d:60:fa:69:c5:75:15:53:2c:3f:92:ae:fe:
26:f3:7a:94:f0:49:0b:4e:20:4f:cd:6b:6a:20:14:48:74:38:
58:49:da:d1:c0:78:4a:87:68:87:3a:4a:98:6f:b4:c8:03:c0:
c1:8a:c2:0d:de:48:6a:cd:83:eb:7f:f5:0f:3b:f7:cf:32:f2:
e1:1e:77:fa:da:c9:a1:19:0e:0a:70:6f:c6:03:1d:da:58:51:
6a:e5:44:04:45:fd:8f:de:dc:90:57:96:49:c7:5b:8d:12:1b:
69:ae:b8:eb:30:38:e4:37:c2:3e:7f:63:57:01:19:82:67:51:
3d:c5:7b:9a:20:e7:eb:a9:d9:0b:d1:fe:fa:5f:92:d2:d5:0c:
cb:39:0d:06:80:5f:0c:9a:fd:70:a1:6e:56:b4:3c:f7:c5:e7:
ab:45:a0:71:06:fd:22:aa:6b:7f:44:c3:b0:fd:3c:04:a9:da:
15:4f:7a:44:1a:71:07:a3:d8:ff:75:74:91:c9:91:a2:6d:a5:
33:f4:10:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:29:49 2025 by rpki-client